Commits

Breadcrumbs

History for

oncodeql-cli-2.25.2

User selector

All users

All time

Commit History

Commits on Mar 29, 2026

• Address review: update QLDoc comment and fix expected test output

  Show description for e6adfbc
  MarkLee131

  committed
  e6adfbc

  Copy full SHA for e6adfbc

• Merge branch 'main' into fix/tainted-arithmetic-bounds-check-barrier

  MarkLee131

  authored
  938039d

  Copy full SHA for 938039d

Commits on Mar 28, 2026

• Exclude bounds-check arithmetic from tainted-arithmetic sinks

  Show description for 0c5e89a
  MarkLee131

  committed
  0c5e89a

  Copy full SHA for 0c5e89a

• Address PR review: add Signature.getInstance sink, HMAC/PBKDF2 whitelist, fix test APIs

  Show description for da4a223
  MarkLee131

  committed
  da4a223

  Copy full SHA for da4a223

• Add EC to secure algorithm whitelist for Java CWE-327 query

  MarkLee131

  committed
  a9449cc

  Copy full SHA for a9449cc

Commits on Mar 5, 2026

• Java: Make Assignment extend BinaryExpr.

  aschackmull

  committed
  ec1d034

  Copy full SHA for ec1d034

Commits on Feb 17, 2026

• Merge pull request #21319 from owen-mc/java/javax-jakarta

  Show description for 94e3d86
  owen-mc

  authored
  94e3d86

  Copy full SHA for 94e3d86

Commits on Feb 16, 2026

• Rename `MethodCall ma` to `mc`

  owen-mc

  committed
  94f1d94

  Copy full SHA for 94f1d94

• Expand log injection sanitizers to annotation regex matches

  owen-mc

  committed
  9fc95f5

  Copy full SHA for 9fc95f5

• Expand log injection sanitizer guards to non-annotation regex matches

  owen-mc

  committed
  924bb92

  Copy full SHA for 924bb92

• Refactor logInjectionGuard part 2

  owen-mc

  committed
  60e58f8

  Copy full SHA for 60e58f8

• Refactor logInjectionGuard part 1

  owen-mc

  committed
  6c0c1d5

  Copy full SHA for 6c0c1d5

• Apply copilot's fixes

  owen-mc

  committed
  53b8f2a

  Copy full SHA for 53b8f2a

• Replace "javax" with `javaxOrJakarta()`

  Show description for a5e6f6d
  owen-mc

  committed
  a5e6f6d

  Copy full SHA for a5e6f6d

Commits on Feb 15, 2026

• Extend RegexMatch framework to allow for MatcherMatchesCall edge case

  owen-mc

  committed
  d6b71a3

  Copy full SHA for d6b71a3

Commits on Feb 14, 2026

• Fix Matcher.matches edge case

  owen-mc

  committed
  8f8f4c2

  Copy full SHA for 8f8f4c2

Commits on Feb 13, 2026

• Rename `RegexMatch` and only include expressions

  owen-mc

  committed
  1fefa98

  Copy full SHA for 1fefa98

Commits on Feb 12, 2026

• Add @Pattern as RegexExecution => SSRF sanitizer

  owen-mc

  committed
  bfe26c1

  Copy full SHA for bfe26c1

Commits on Feb 11, 2026

• Use RegexExecution in sanitizer definitions (expands scope)

  owen-mc

  committed
  a22fd39

  Copy full SHA for a22fd39

• Use new regex-related classes (no functional change)

  owen-mc

  committed
  fa3fba4

  Copy full SHA for fa3fba4

Commits on Feb 4, 2026

• Java: Make loop classes extend LoopStmt and use getBody instead of getStmt.

  aschackmull

  committed
  4fcf3fb

  Copy full SHA for 4fcf3fb

• Java: Rename ReturnStmt.getResult to getExpr.

  aschackmull

  committed
  6f40ac1

  Copy full SHA for 6f40ac1

• Java: Rename UnaryExpr.getExpr to getOperand.

  aschackmull

  committed
  5e6e64b

  Copy full SHA for 5e6e64b

Commits on Jan 9, 2026

• Minor tweaks to QLDocs

  owen-mc

  authored
  8c9318b

  Copy full SHA for 8c9318b

Commits on Jan 6, 2026

• Accept MaD sanitizers for existing sink kinds

  owen-mc

  committed
  766e908

  Copy full SHA for 766e908

• Rename classes for external sanitizers

  owen-mc

  committed
  81667d7

  Copy full SHA for 81667d7

Commits on Dec 11, 2025

• Convert regex injection barrier to MaD

  

  owen-mc

  authored and

  aschackmull

  committed
  87f58fe

  Copy full SHA for 87f58fe

• Convert XSS barrier to MaD

  

  owen-mc

  authored and

  aschackmull

  committed
  44295e4

  Copy full SHA for 44295e4

• Convert request forgery barrier guard to MaD

  

  owen-mc

  authored and

  aschackmull

  committed
  7e562f3

  Copy full SHA for 7e562f3

• Convert path injection barrier to MaD

  

  owen-mc

  authored and

  aschackmull

  committed
  f6e3c77

  Copy full SHA for f6e3c77

• Convert trust boundary violation barrier and barrier guard to MaD

  

  owen-mc

  authored and

  aschackmull

  committed
  f6e40bd

  Copy full SHA for f6e40bd

Commits on Dec 4, 2025

• Merge pull request #20956 from owen-mc/java/improve-regex-sanitizer

  Show description for 5c8ab1f
  owen-mc

  authored
  5c8ab1f

  Copy full SHA for 5c8ab1f

Commits on Dec 3, 2025

• Use flowFrom.

  aschackmull

  committed
  dc6d3fe

  Copy full SHA for dc6d3fe

Commits on Dec 2, 2025

• Make tests pass

  owen-mc

  committed
  a85d0ea

  Copy full SHA for a85d0ea

• Refactor regex sanitizer

  Show description for 566aa8f
  owen-mc

  committed
  566aa8f

  Copy full SHA for 566aa8f